Technical Information
Network activity
Connects to
- 'na######code.rozblog.com':80
- 'microsoft.com':80
- 'p3###########.shr.prod.phx3.secureserver.net':80
- 'ka####-behzisti.ir':80
- 'bm#.ir':443
- 'cd#.#sriran.com':443
- 'vi##a.ir':443
- 'cd#.#sriran.com':80
- 'bm#.ir':80
- 'go#####agmanager.com':443
- 'st###c2.ilna.ir':80
- 'pe##ar.net':80
- 'bi###kade.com':80
- 'as###amoon.ir':80
- 'vi##a.ir':80
- 's8.##cofile.com':443
- 'ma##ham.ir':80
- 'we##ozar.ir':80
- 'gr###tar.com':80
- 's8.##cofile.com':80
- 'cd#.##ktanet.com':443
- 'cd#.###ine.4dsply.com':443
- 'r3.#.lencr.org':80
- 'oc##.#ectigo.com':80
TCP
HTTP GET requests
- http://na######code.rozblog.com/code/popup
- http://ro##p.ir/view/2829889/964042_417_692287.jpg
- http://ro##p.ir/view/2838277/maliat_163427.jpg
- http://ro##p.ir/view/2865204/983735_860_102190.jpg
- http://ro##p.ir/view/2865218/983094_767_121703.jpg
- http://ro##p.ir/view/2875802/c8d3804e-6b79-4339-8377-5b129cb43320_65801.jpg
- http://ro##p.ir/view/2880064/992304_156_890922.jpg
- http://ro##p.ir/view/2880088/725732_285_573828.jpeg
- http://ro##p.ir/view/2880948/990426_490.jpg
- http://ro##p.ir/view/2794348/946745_916.jpg
- http://ro##p.ir/view/2881641/news_18392_1404275306_799751.jpg
- http://ro##p.ir/view/2890149/998421_968_570682.jpg
- http://ro##p.ir/view/2891028/999029_180_207664.jpg
- http://ro##p.ir/view/2900043/1003181_592.jpg
- http://ro##p.ir/view/2900082/1003014_116_410363.jpg
- http://ro##p.ir/view/2900140/1002699_360.jpg
- http://ro##p.ir/view/2903436/1004438_599.jpg
- http://ro##p.ir/view/3122327/shad.app.jpg
- http://ro##p.ir/view/3122935/191746_896817.jpg
- http://ro##p.ir/view/2882365/132950.jpg
- http://ro##p.ir/view/2149616/ncr-ir.jpg
- http://ro##p.ir/view/2144727/246715.jpg
- http://ro##p.ir/view/2149653/fish-hoghoogh.jpg
- http://ro##p.ir/view/2882346/133259_538932.jpg
- http://ro##p.ir/view/3200157/stockholdercode021.jpg
- http://ro##p.ir/view/2301303/yasooj-fish.JPG.jpg
- http://ro##p.ir/view/2354629/esme-pesar-turki.jpg
- http://ro##p.ir/view/2617923/travel-turkey.jpg
- http://ro##p.ir/view/2706175/910398_227.jpg
- http://ro##p.ir/view/2193473/images_844127.jpg
- http://ro##p.ir/view/2241114/sahame-edalat.jpg
- http://ro##p.ir/view/2551739/864822_504.jpg
- http://ro##p.ir/view/2193297/keshvar.jpg
- http://ro##p.ir/view/2148803/hafteye-mashagel.jpg
- http://ro##p.ir/view/2709800/911198_648.jpg
- http://ro##p.ir/view/2744536/PhotoFree.jpg
- http://ro##p.ir/view/2325686/eydi-saal97.jpg
- http://ro##p.ir/view/2132467/Pic[1]_68407_790016.jpg
- http://ro##p.ir/view/2270511/emamreza.JPG.jpg
- http://ro##p.ir/view/151413/itemtracking.post.ir.GIF.gif
- http://ro##p.ir/view/2191491/sheikhol%20raees.png
- http://ro##p.ir/view/2149621/yaraneh-naghdi.jpg
- http://ro##p.ir/view/3123469/192013.jpg
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://ro##p.ir/view/3130479/samanese.ir_498523.png
- http://ro##p.ir/view/3296913/1185790_646.jpg
- http://ro##p.ir/view/2300168/fish-behzisti.JPG.jpg
- http://cd#.#sriran.com/files/fa/news/1395/12/7/675253_702.jpg
- http://ro##p.ir/view/2300184/kanoonparvaresh.JPG.jpg
- http://ro##p.ir/view/2300263/dampezeshki.JPG.jpg
- http://ro##p.ir/view/2304551/qom-uni-fish.jpg
- http://ro##p.ir/view/2307030/urmia-university-urmia-ac-ir_8.jpg
- http://ro##log.com/images/refresh.gif
- http://na######code.rozblog.com/user/nationalcode.jpg
- http://ro##p.ir/view/2300135/rah-sharhrsazi-fish.JPG.jpg
- http://ro##p.ir/view/2308377/arm.jpg
- http://www.gr###tar.com/avatar/587adb11a4876ef1a078749bf0ac971f?d=#####
- http://www.gr###tar.com/avatar/b01f82c8c252f50e54048298652badad?d=#####
- http://s8.##cofile.com/file/8308309118/telegram_channel_mabaham.png
- http://ro##p.ir/view/2308763/karmand.ichto.ir.JPG.jpg
- http://www.gr###tar.com/avatar/44545bd5be7dc22ceb2b3fe092db6180?d=#####
- http://ro##log.com/temp/rang/like.png
- http://ro##log.com/include/rozblog_ads_js.php
- http://na######code.rozblog.com/js/site.js
- http://www.gr###tar.com/avatar/4a38910ded8bb43e3dc7cdc5157e40dc?d=#####
- http://ro##p.ir/view/2299314/gu.ac.ir.jpg
- http://ro##p.ir/view/2298098/shiraz-fish.JPG.jpg
- http://ro##p.ir/view/2298044/titr.JPG.jpg
- http://ro##p.ir/view/3296916/1185410_859.jpg
- http://ro##p.ir/view/3297188/corona.jpg
- http://ro##p.ir/view/3299585/1186579_505.png
- http://ro##p.ir/view/2149656/fish-hoghoogh_663219.jpg
- http://ro##p.ir/view/2270699/banksepah.jpg
- http://ro##p.ir/view/2271625/guilan.ac.ir.jpg
- http://ro##p.ir/view/2283046/754672_901.jpg
- http://ro##p.ir/view/2283108/biglogo.gif
- http://ro##p.ir/view/2283125/olompezeshki.JPG.jpg
- http://ro##p.ir/view/2283601/fish-gaz.jpg
- http://ro##p.ir/view/2283608/header_155024.png
- http://ro##p.ir/view/2284587/bsi.jpg
- http://ro##p.ir/view/2288972/naftkhiz.png
- http://ro##p.ir/view/2288994/Header_156930.jpg
- http://ro##p.ir/view/2293178/b435.jpg
- http://ro##p.ir/view/2293212/salary.jpg
- http://ro##p.ir/view/2294084/tabrizu.ac.ir.JPG.jpg
- http://ro##p.ir/view/2294120/arak-university.png
- http://ro##p.ir/view/2298026/BMILogo.png
- http://ro##p.ir/view/3243517/1158231_347_480978.jpg
- http://oc##.#ectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEA4XQ00je0h9hnmjUyA%2F95g%3D
UDP
- DNS ASK ro##log.com
- DNS ASK microsoft.com
- DNS ASK p3###########.shr.prod.phx3.secureserver.net
- DNS ASK go#####agmanager.com
- DNS ASK pe##ar.net
- DNS ASK st###c2.ilna.ir
- DNS ASK bi###kade.com
- DNS ASK cd#.#sriran.com
- DNS ASK vi##a.ir
- DNS ASK as###amoon.ir
- DNS ASK bm#.ir
- DNS ASK me###.agri-bank.com
- DNS ASK ka####-behzisti.ir
- DNS ASK en####.webgozar.ir
- DNS ASK we##ozar.ir
- DNS ASK gr###tar.com
- DNS ASK s8.##cofile.com
- DNS ASK ro##p.ir
- DNS ASK ma##ham.ir
- DNS ASK cd#.##ktanet.com
- DNS ASK cd#.###ine.4dsply.com
- DNS ASK na######code.rozblog.com
- DNS ASK r3.#.lencr.org
- DNS ASK oc##.#ectigo.com
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
